Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: mOKDLaiKj0ptb+iglTjVpJnXD4YsXZDr26U9Nx8+jfU=
Subject key identifier: EA:F8:2A:1D:4F:DA:78:F0:BE:1D:5B:24:76:38:14:63:80:23:91:38
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019748C2ED1832ACD21DBEDCA593345BEEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:23 +0000
Manifest this update: Sat 07 Jun 2025 05:00:23 +0000
Manifest next update: Sun 08 Jun 2025 05:00:23 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: eG8eJNtWgB9pHUm7xjd+9vJa2pzKOB9OZW9RNNXbtg0=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:ed:18:32:ac:d2:1d:be:dc:a5:93:34:5b:ee:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jun 7 05:00:23 2025 GMT
Not After : Jun 8 05:00:23 2025 GMT
Subject: CN=eaf82a1d4fda78f0be1d5b247638146380239138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:4c:84:68:6c:1d:f4:72:72:02:c5:94:e5:
1a:bc:83:4f:cb:aa:4f:ce:3d:da:d6:64:e1:91:33:
2b:e3:fc:44:f4:53:46:83:65:b9:5b:f4:a0:2e:a7:
b8:33:3d:20:6f:2c:93:47:3a:3d:92:98:08:f6:44:
ce:94:05:4c:6a:c5:99:b6:85:8c:9d:d7:40:84:d9:
4b:57:d6:12:bc:cb:bb:aa:c4:cb:bb:68:a5:09:b9:
5c:48:f6:10:6e:3e:1a:95:a8:04:25:5a:3e:01:6c:
ab:e8:17:7d:8a:40:82:75:03:29:f6:9b:6b:31:07:
41:2b:b6:b4:57:1b:63:54:44:6f:9e:12:97:bf:5c:
19:d8:78:1c:b3:13:17:2c:bd:98:bd:63:ad:aa:bb:
42:4f:a2:0a:53:0e:15:8d:9e:d4:5d:96:4a:d5:eb:
05:43:65:83:b0:20:05:28:7c:3a:59:4d:b1:36:f8:
cc:a9:b1:94:3a:2a:c6:8b:f7:cd:ca:56:db:76:a9:
fd:3d:0b:4d:99:89:b1:72:50:26:18:3e:20:bf:1f:
a9:5d:3c:cb:82:0b:fe:ea:10:60:03:6e:b9:e8:02:
22:e2:52:32:14:e5:52:40:b0:0f:7e:24:3d:a6:0c:
35:b8:c1:71:e6:ab:1d:73:14:1d:1a:0c:91:a5:dd:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:2A:1D:4F:DA:78:F0:BE:1D:5B:24:76:38:14:63:80:23:91:38
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3c:43:f7:46:4d:69:1f:5a:79:1d:c2:78:04:b6:dd:af:e3:
51:da:a9:5c:8a:26:13:4f:08:f3:52:7d:ae:e9:6e:15:2e:9d:
b5:04:fa:ff:d0:15:57:cf:c3:3b:3b:5e:c8:d7:8b:be:cd:56:
53:b3:58:2b:a2:82:46:37:38:a2:87:c4:5c:45:a2:cc:8e:70:
6a:68:39:5c:5f:b9:6b:37:5b:ef:12:c6:bd:6a:ff:e7:4a:ed:
94:33:b9:b7:c7:ad:33:00:c8:3a:a3:e3:72:70:69:95:64:c3:
f0:15:22:2b:f2:ab:5c:3e:c0:db:1a:f2:42:b9:e8:db:4f:b1:
8a:21:b0:3a:6f:24:bf:4d:59:11:d2:b4:c1:f2:b4:57:e7:28:
7e:34:55:46:08:b9:48:b0:2b:0c:41:df:d2:0d:92:e8:79:4c:
8c:a8:69:5d:f7:7e:c1:78:36:01:30:f7:91:5e:bd:2d:72:e3:
ea:94:6d:60:b2:51:e5:4f:9f:88:4e:eb:71:9a:ed:5a:fe:6b:
e4:22:fe:a0:03:8b:71:03:7a:a8:72:f0:f3:71:7c:7c:4a:15:
f6:45:74:12:61:7f:bc:08:95:80:a3:6c:93:8f:7e:76:71:41:
06:96:2a:e8:4c:a7:52:15:36:ee:12:97:9b:77:eb:60:2f:22:
1c:35:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:37:10 2025 by rpki-client